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Introduction 


Silicon Valley is coming. There are hundreds of start-ups with a lot of brains 
and money working on various alternatives to traditional banking. 


— Jamie Dimon 


Banking has historically been one of the 
business sectors most resistant to dis- 
ruption by technology. Since the first 
mortgage was issued in England in the 
11th century, banks have built robust 
businesses with multiple moats: ubiqui- 
tous distribution through branches, 
unique expertise such as credit under- 
writing underpinned both by data and 
judgment, even the special status of 
being regulated institutions that supply 
credit, the lifeblood of economic growth, 
and have sovereign insurance for their li- 
abilities (deposits). Moreover, consumer 
inertia in financial services is high. Con- 
sumers have generally been slow to 
change financial services providers. Par- 
ticularly in developed markets, con- 
sumers have historically gravitated 
toward the established and enduring 
brands in banking and insurance that 
were seen as bulwarks of stability even in 
times of turbulence. 


The result has been a banking industry 
with defensible economics and a resilient 


business model. In recent decades, 
banks were also helped by the twin tail- 
winds of deregulation, a period ushered 
in by the Depository Institutions Deregu- 
lation Act of 1980 (DIDRA), and demo- 
graphics (e.g., the baby boom generation 
coming of age and entering their peak 
earning years). In the period between 
1984 and 2007, U.S. banks posted aver- 
age returns on equity (ROE) of 13%. The 
last period of significant technological 
disruption, which was driven by the ad- 
vent of commercial Internet and the dot- 
com boom, provided further evidence of 
the resilience of incumbent banks. In the 
eight-year period between the Netscape 
IPO and the acquisition of PayPal (one of 
the winners of this era) by eBay, more 
than 450 attackers — new digital curren- 
cies, wallets, networks, etc. — attempted 
to challenge incumbents. Fewer than five 
of these survive as stand-alone entities 
today. In many ways, PayPal is the ex- 
ception that proves the rule: it is tough to 
disrupt banks. 
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The Finlech Moment 


History does not repeat itself; but it often rhymes. — Mark Twain 


Exhibit 1 


Finlechs are 


This may now be changing. McKinsey's 
proprietary Panorama FinTech Database 
tracks the launch of new FinTech compa- 
nies - i.e., start-ups and other companies 
that use technology to conduct the funda- 
mental functions provided by financial 
services, impacting how consumers store, 
save, borrow, invest, move, pay and pro- 
tect money. In April 2015, this database 
included approximately 800 FinTech start- 
ups globally; now that number stands at 
more than 2,000. FinTech companies are 
undoubtedly having a moment. 


Globally, nearly $23 billion of venture 
capital and growth equity has been de- 
ployed to FinTechs over the last five 
years, and this number is growing 
quickly ($12.2 billion was deployed in 
2014 alone). 


So we now ask the same question we 
asked during the height of the dot-com 
boom: is this time different? In many 
ways, the answer is no. But in some fun- 
damental ways, the answer is yes. History 
is not repeating itself, but it is rhyming. 


Customer segments and products of leading FinTechs, 2015' 


Percent of total Segments’ share 
everywhere, of global banking 
revenues 
especially IN Customer <5% 
segments E 5% - 7.5% 
ment 
payments E 7.5% - 10% 
Retail E >10% 
Products/ 
Commercial? capabilities 


Large corporate? 


Financial assets 
and capital markets* 
Payments 


Lending and financing 


Account management? 


1 350+ commercially most well-known cases registered in the Panorama database, may not be fully representative. 


2 Includes small and medium-size enterprises 


3 Including large corporates, public entities and non-banking financial institutions 


4 Includes sales and trading, securities services, retail investment, non-current-account deposits and asset management factory 


5 Revenue share includes current/checking account deposit revenue 
Source: McKinsey Panorama — FinTech Database 


Exhibit 2 


The level of VC 
investment in 
FinTech has 
recently 
accelerated 
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The historical moats surrounding banks 
are not different. Banks remain uniquely 
and systemically important to the econ- 
omy; they are highly regulated institu- 
tions; they largely hold a monopoly on 
credit issuance and risk-taking; they are 
the major repository for deposits which 
customers largely identify with their pri- 
mary financial relationship; they continue 
to be the gateways to the world's largest 
payment systems; and they still attract 
the bulk of requests for credit. 


Some things have changed, however. 
First, the financial crisis had a negative 
impact on trust in the banking system. 
Seconaly, the ubiquity of mobile devices 
has begun to undercut the advantages of 
physical distribution that banks previ- 


Global investment in FinTech 


ously enjoyed. Smartphones enable a 
new payment paradigm as well as fully 
personalized customer services. In addi- 
tion, there has been a massive increase 
in the availability of widely accessible 
globally transparent data, coupled with a 
significant decrease in the cost of com- 
puting power. Two iPhone 6s have more 
memory capacity than the International 
Space Station. As one FinTech entrepre- 
neur said, “In 1998, the first thing | did 
when | started up a FinTech business 
was to buy servers. | don't need to do 
that today - | can scale a business on 
the public cloud.” There has also been a 
significant demographic shift. Today, in 
the U.S., alone, 85 million Millennials, all 
digital natives, are coming of age, and 
they are considerably more open than the 
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Source: CBinsights, McKinsey Panorama 
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Exhibit 3 


Origination and 
sales - the focus 
of non-bank 
attackers — 
account for 
-60% of global 
banking profits 


1 The Fight for the Customer: 
McKinsey Global Banking Annual 
Review 2015, September 2015, 
mckinsey.com. 
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Global banking revenues and profits by activity, 2014 


$ billions 
Balance-sheet provision Origination/sales 
P TREO 
Core banking Current/checking accounts 526 131 
Deposits 174 44 
Investment banking' 136 214 
Fee-based : 
ehren Transactions/payments 0 483 


Asset management and insurance? 


Total revenues 
Total after-tax profits 


ROE 


2,075 (54%) 1,750 (46%) 
436 (41%) 621 (59%) 
6% 22% 


1 Corporate finance, capital markets, securities services 


Credit disintermediation 


Customer disintermediation 


? Asset management includes investment and pension products. Insurance includes bank-sold insurance only. 


Source: McKinsey Panorama — Global Banking Pools 


40 million Gen Xers who came of age 
during the dot-com boom were to con- 
sidering a new financial services provider 
that is not their parents’ bank. But per- 
haps most significantly for banks, con- 
sumers are more open to relationships 
that are focused on origination/ sales 
(e.g., Uber, AirBnB, Booking.com, etc.), 
are personalized, and emphasize seam- 
less or on demand access to an added 


layer of service separate from the under- 
lying provision of the service or product. 
FinTech players have an opportunity for 
customer disintermediation that could be 
significant - McKinsey’s 2015 Global 
Banking Annual Review estimates that 
banks earn an attractive 22% ROE from 
origination and sales, much higher than 
the bare-bones provision of credit, which 
generates only a 6% ROE.' 
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Fintech Attackers: 
Six Markers of Success 


Predictions are dangerous, especially about the future. — Yogi Berra 


While the current situation differs from 
the dot-com boom, the failure rate for 
FinTech businesses is still likely to be 
high. However, in a minority of cases, 
FinTechs focused on the retail market, 
will break through and build sustainable 
businesses, and they are likely to pro- 
foundly reshape certain areas of financial 
services — ultimately becoming far more 
successful than the scattered and largely 
sub-scale FinTech winners of the dot- 
com boom. Absent any mitigating actions 
by banks, in five major retail banking 
businesses - consumer finance, mort- 
gages, lending to small and medium- 
sized enterprises, retail payments and 
wealth management - from 10% to 40% 
of bank revenues (depending on the busi- 
ness) could be at risk by 2025. Attackers 
are likely to force prices lower and cause 
margin compression. 


We believe the attackers best positioned 
to create this kind of impact will be dis- 
tinguished by the following six markers: 


1) Advantaged modes of customer 
acquisition. FinTech start-ups must 
still build the most important asset of 
any business from scratch: customers. 
Banks already have them, and attack- 
ers will find it difficult to acquire them 
cost-effectively in most cases. FinTech 


attackers are subject to the same rules 
that apply to any e-commerce busi- 
nesses. Over time, a key test of scala- 
bility is that gross margins increase 
while customer acquisition costs de- 
crease. During the dot-com boom, 
eBay, a commerce ecosystem with 
plenty of customers, was able to re- 
duce PayPal's cost of customer acqui- 
sition by more than 80%. FinTech 
attackers this time around will need to 
find ways to attract customers cost-ef- 
fectively. In the payments point-of-sale 
(POS) space, several FinTech attack- 
ers, such as Revel and Poynt, are 
seeking to capitalize on an industry 
disruption — the rollout of EMV (Euro- 
pay, MasterCard and Visa — the global 
standard for chip-based debit and 
credit card transactions) in the U.S. 
and the resulting acceleration of POS 
replacement cycles. They are attempt- 
ing to leverage distribution from mer- 
chant processors and others with 
existing merchant relationships to ac- 
quire merchants as customers more 
quickly and less expensively than 
would otherwise be possible. 


2) Step-function reduction in the cost 
to serve. The erosion of the advan- 
tages of physical distribution make this 
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a distinctive marker for the most disrup- 
tive FinTech attackers. For example, 
many FinTech lenders have up to a 400 
bps cost advantage over banks, be- 
cause they have no physical distribution 
costs. While this puts a premium on the 
importance of the first marker, it also 
enables FinTech businesses to pass on 
significant benefits to customers with 
regard to cost and time to process loan 
applications. 


3) Innovative uses of data. Perhaps the 
most exciting area of FinTech innova- 
tion is the use of data. For example, 
several players are experimenting with 
new credit scoring approaches — rang- 
ing from looking at college attended 
and majors for international students 
with thin or no credit files to trust 
scores based on social network data. 
Many of these experiments will fail, 
stress-tested by credit and economic 
cycles (it is not hard to lend based on 
different underwriting criteria when 
times are good; the hard part is getting 
the money back when times are tough). 
But big data and advanced analytics 
offer transformative potential to predict 
“next best actions,” understand cus- 
tomer needs, and deliver financial serv- 
ices via new mechanisms ranging from 
mobile phones to wearables. Credit un- 
derwriting in banks often operates with 
a case law mindset and relies heavily 
on precedent. In a world where more 
than 90% of data has been created in 
the last two years, FinTech data experi- 
ments hold promise for new products 
and services, delivered in new ways. 


4) Segment-specific propositions. The 
most successful FinTech attackers will 
not begin by revolutionizing all of bank- 
ing or credit. They will cherry pick, with 
discipline and focus, those customer 
segments most likely to be receptive to 
what they offer. For example, Wealth- 
front targets fee-averse Millennials who 
favor automated software over human 
advisors. Lending Home targets moti- 
vated investment property buyers look- 
ing for cost-effective mortgages with an 
accelerated cycle time. Across FinTech, 
three segments — Millennials, small 
businesses and the underbanked - are 
particularly susceptible to this kind of 
cherry picking. These segments, with 
their sensitivity to cost, openness to re- 
mote delivery and distribution, and 
large size, offer a major opportunity for 
FinTech attackers to build and scale 
sustainable businesses that create 
value. Within these segments, many 
customers are open to innovative, re- 
mote FinTech approaches not offered 
by traditional banks 


5) Leveraging existing infrastructure. 
Successful FinTech attackers will em- 
brace “co-opetition” and find ways to 
engage with the existing ecosystem of 
banks. Lending Club's credit supplier is 
Web Bank, and PayPal's merchant ac- 
quirer is Wells Fargo. In the same way 
that Apple did not seek to rebuild telco 
infrastructure from scratch but intelli- 
gently leveraged what already existed, 
successful FinTech attackers will find 
ways to partner with banks, e.g., ac- 
quire underbanked customers that 
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banks cannot serve or acquire small 
business customers with a SaaS offer- 
ing to run the business overall while a 
bank partner supplies the credit. Apple 
Pay offers a template for this: with tok- 
enization capabilities supplied by the 
payment networks, it seeks to provide 
an enhanced digital wallet customer ex- 
perience in partnership with banks. 


6) Managing risk and regulatory 
stakeholders. FinTech attackers are 
flying largely under the regulatory radar 
today, but they will attract attention as 
soon as they begin to attain meaningful 
scale. Those that ignore this dimension 
of building a successful business do so 
at their own peril. Regulatory tolerance 
for lapses on issues such as KYC, 
AML, compliance, and credit-related 
disparate impact will be low. Those 
FinTech players that build these capa- 
bilities will be much better positioned 
to succeed than those that do not. 
More broadly, regulation is a key swing 
factor in how FinTech disruption could 
play out. Although unlikely to change 
the general direction, regulation could 
affect the speed and extent of disrup- 
tion, if there were material shocks that 
warranted stronger regulatory involve- 


ment, e.g., cyber-security issues with 
leading FinTechs. The impact could 
also vary significantly by country, given 
different regulatory stances, e.g., 
Anglo-Saxon regulation on data usage 
versus other EU countries; payments 
system directives in Europe that cause 
banks to open up their Application Pro- 
gramming Interfaces (APIs) to non- 
banks; Brazil’s regulatory stance on 
P2P lending; or stricter regulation in 
some Asian markets. 


As with disruptors in any market, the ulti- 
mate test of whether a FinTech player 
succeeds or fails is whether these six 
markers combine to create a sustainable 
new business model. Consider what in- 
ventory means for Netflix, or storefronts 


£ 


are for Amazon. A successful business 
model would change the basis of compe- 


tition and drive revenues differently, e.g., 


data advantages may be more important 
than distribution, and revenues may not 
rely on traditional banking spread and fee 
economics. Despite what is likely to be a 
large failure rate among FinTechs, the 
small number of winners will have a busi- 
ness model edge that sustains them 
through economic and credit cycles and 
helps them build enduring brands. 


Exhibit 4 


Banks should 
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Banks: Six Digital Imperatives 


If you can keep your head while all about you are losing theirs... — Rudyard Kipling 


Banks are subject to a lot of noise about 
FinTechs today. Optimism regarding tech- 
nology is at a high, mobility is widely re- 
garded as a game-changer, and vast 
amounts of capital are being deployed in 
FinTechs. Banks may be tempted to dis- 
miss the noise entirely, or they may panic 
and overreact. We recommend a middle 
ground that focuses on separating the 
signals that are truly important from the 
noise. Specifically, this means that banks 
should be less preoccupied with individ- 


ual FinTech attackers and more focused 
on what these attackers represent — and 
build or buy the capabilities that matter 
for a digital future. 


1) Use data-driven insights and ana- 
lytics holistically across the bank. 
Attackers powered by data and analyt- 
ics — be they FinTechs, large consumer 
ecosystems (e.g. Facebook, Google, 
Apple), or some of the more progres- 
sive financial institutions — are opening 


f d DATA-DRIVEN INTEGRATED DIGITAL DIGITALLY-ENA NEXT-GEN DIGITAL 
DIGITAL CUSTOMER MARKETING BLED TECHNOLOGY ENABLERS 
be ocused on INSIGHTS EXPERIENCE OPERATIONS 


building an 
extensive set of 
distinct digital 
capabilities 


Comprehensive 
data ecosystem, 
including 3rd 
party APIs 


Robust 
analytics and 
data 
infrastructure 


360 single 


Customer 
centric 
experience 
design (UX/UI) 


Omni channel 
experience 
delivery 


Customer 


Targeted digital 


media 


Content 


marketing 


Digital 


Digitized sales 
and service 
interactions 


Streamlined 
and automated 
fulfillment 
processes 


Operational 


Scalable 
application 
architecture 


Cybersecurity 


Agile delivery 


Digital talent 
management 


Organization 
and 
governance 


Innovative test 


to market 


excellence 
enablers 


customer 
lifecycle 
management 


decision 
journey 
experience 


customer view and learn 


culture 


Targeted 
product and 
service 
decisioning 


Marketing 
operations 


Flexible IT 
infrastructure 


DIGITAL OUTCOMES 


NOTE: The framework illustrated above is a componant of Mckinsey's Digital Capabilities (DC™) diagnostic, a 360° objective benchmark of the extensive set of core digital capabilities 
needed to enable a sucessful digital strategy. 
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up new battlegrounds in areas like cus- 
tomer acquisition, customer servicing, 
credit provision, relationship deepening 


Access to large quantities 
of transaction data, underwriting and 
custom-scoring customers 
for credit-worthiness, understanding 
and managing through 
credit and economic cycles 
— these are unique assets, skills and 
capabilities that banks have built and 
leveraged over centuries. 


through cross-sell, and customer re- 
tention and loyalty. Consider the provi- 
sion of credit - one of banking’s last big 
moats. Access to large quantities of 
transaction data, underwriting and cus- 
tom-scoring customers for credit-wor- 
thiness, understanding and managing 
through credit and economic cycles — 
these are unique assets, skills and ca- 
pabilities that banks have built and 
leveraged over centuries. But now the 
large-scale availability of new and big 
data (and the fact that banks no longer 
have a monopoly on such data) is 
pushing banks to radically transform 
just to keep up. Building a comprehen- 
sive data ecosystem to access cus- 
tomer data from within and beyond the 
bank; creating a 360-degree view of 
customer activities; creating a robust 


analytics and data infrastructure; and 
leveraging these to drive scientific (ver- 
sus case law-based) decisions across 
a broad range of activities from cus- 
tomer acquisition to servicing to cross- 
selling to collections - all are critical to 
a bank's future success. 


2) Create a well-designed, segmented 


and integrated customer experi- 
ence, rather than one-size-fits-all 
distribution. The days of banking 
being dominated by physical distribu- 
tion are rapidly coming to an end. The 
proliferation of mobile devices and 
shifting preferences among demo- 
graphic groups mean that customers 
expect more real-time, cross-channel 
capabilities (e.g. status inquiries, prob- 
lem-resolution) than ever before. Phys- 
ical distribution will still be relevant, but 
far less important, and banks must 
learn to deliver services with a com- 
pelling design and a seamless uncon- 
ventional customer experience. Banks 
must recognize that customer expec- 
tations are increasingly being set by 
non-banks. Why does a mortgage ap- 
plication take weeks to process? Why 
does it take an extra week (or two) to 
get a debit card online versus in a 
branch? Why can't a customer make a 
real-time payment from his/her phone 
to split a dinner check? Banks need to 
respond to these questions by improv- 
ing their customer experience and 
meeting their customers’ changing ex- 
pectations. Financial services is the 
only business where you can be re- 
jected as a customer. In an age where 
mobile devices provide real-time trans- 
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parency on just about everything, it is 
critical to provide customers with infor- 
mation about the status of an applica- 
tion or what other documents are 
required. Account balances must be 
consistent across channels, and banks 
should consider the real-time updating 
that an on-demand app such as Uber 
provides and aim to deliver that level 
of transparency when it matters. Such 
innovation provides opportunities for 
banks to improve and differentiate their 
customers’ cross-channel and cross- 
product experiences. 


retaining digital marketing talent will re- 
quire considerable time and investment. 


4) Aggressively mitigate the potential 


cost advantage of attackers 
through radical simplification, 
process digitization and streamlin- 
ing. After the last dot-com boom, 
banks successfully electronified core 
processes. Now they must digitize 
them. The difference is crucial — an 
electronic loan processing and fulfill- 
ment process at a bank largely implies 
the sharing and processing of PDF files 
of paper documents. We estimate that 
the majority of the cost of processing a 
mortgage is embedded in highly man- 


Today, banks are in a fight 
for the customer, not only with other 
banks but also non-banks. 


ual loops of work and rework. Digitizing 
a mortgage application would involve 
creating and manipulating data fields in 


3) Build digital marketing capabilities 


that equal eCommerce giants. 
Today, banks are in a fight for the cus- 
tomer, not only with other banks but 
also non-banks. The moats that have 
historically protected banks will not 
even begin to compensate for the wide 
gap in marketing skills that currently ex- 
ists between eCommerce players and 
banks. Big data and the advanced ana- 
lytics capabilities described above are 
merely the foundation of digital market- 
ing. Mastering digital media, content 


marketing, digital customer lifecycle 

management and marketing operations 
will be critical to banks’ success. Build- 
ing these capabilities and recruiting and 


a largely automated manner in the 
cloud, e.g., borrower income and liabili- 
ties. This will be a multi-year process 
for banks, as it will require the integra- 
tion of multiple legacy systems and po- 
tential re-platforming to enable truly 
digitized processes. Simplification, digi- 
tization and streamlining opportunities 
exist across large swaths of banking 
operations. The sooner banks attack 
these opportunities, the more prepared 
they will be to compete with FinTech at- 
tackers that have a structurally lower 
cost base. New technologies will offer 
banks opportunities to test and scale to 
achieve efficiences. For example, as the 
hype surrounding Bitcoin currency 
fades, it is clear that the “baby in the 
bathwater” may well be distributed 
ledger technologies that enable more 
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cost-effective storage and rapid clear- 
ing and settlement of transactions in 
the banking back office. 


delivery. Finally, significantly faster, more 
nimble and dramatically lower-cost ver- 
sions of processing and storage tech- 
nologies are now commonplace. Banks 
need to move onto such platforms, retir- 
ing and replacing legacy systems 


From providing truly scalable 
application architecture with a particular 
emphasis on mobile to addressing the 
cybersecurity threats they face every 
day to learning agile delivery and 
modernizing their infrastructure, banks 
have a challenging, but important road 
ahead in building next-generation 
technology capabilities. 


quickly. Since such systems are neither 
easily nor quickly replaced, many banks 
may choose to move to a “two-speed 
architecture” approach that builds more 
flexible layers of technology on top of 
existing stystems, but still draws on and 
interacts with those systems to provide 
the next generation of technology agility 
and seamless customer experiences. 
From providing truly scalable application 
architecture with a particular emphasis 
on mobile to addressing the cybersecu- 


5) Rapidly leverage and deploy the 


next generation of technologies, 
from mobile to agile to cloud. The 
technology agenda for banks and bank 
ClOs has become even more demand- 
ing and complex. First and foremost, 
“mobile-first” is not just a buzzword — it 
is the clearest directive banks could re- 
ceive from consumers about how they 
want to interact with their service 
providers. Secondly, banks must fortify 
not only their technologies, but also their 
internal processes and cultures, to de- 
fend customers' data from breaches. 
Third, the pace of innovation in banking 
is accelerating rapidly, requiring banks to 
increase their speed to keep up, includ- 
ing software development through tech- 
niques such as agile and continuous 


rity threats they face every day to learn- 
ing agile delivery and modernizing their 
infrastructure, banks have a challenging, 
but important road ahead in building 
next-generation technology capabilities. 


6) Rethink legacy organizational 


structures and decision rights to 
support a digital environment. The 
typical organization chart of any bank 
will show a matrix of products and 
channels, with physical distribution 
usually leading in size and scope. The 
P&Ls that accompany these matrices 
vest power in the owners of the chan- 
nels and products that are most likely 
to be in the firing line of FinTech at- 
tackers. These attackers are typically 
oriented to customer metrics tied di- 
rectly to their financial performance. In 
contrast, most banks have consensus- 
oriented cultures that require a long 
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time to build alignment. Banks must 
complement their existing P&Ls with 
approaches that enable faster adapt- 
ability to external changes and foster 
cultures that support speedier deci- 
sion-making. Banks must think hard 
about how best to organize to support 
the five preceding imperatives, ¡.e., 
what organizational structure and deci- 
sion rights will most effectively support 
a data and insight driven operating 
model, a distinctive customer experi- 
ence, digitized processes for greater 
efficiency, and next-generation tech- 
nology deployment? What innovations 
should take place within the bank? 
What should be developed in incuba- 
tors or even in separate digital banks 
under separate brands? Should the 
bank have separate laboratories or a 
VC-like investment vehicle to be able 
to experiment with new technologies? 


Taken together, these six imperatives 
carry the same overall implication for 


Miklos Dietz 
Somesh Khanna 
Tunde Olanrewaju 


Kausik Rajgopal 


banks as the six markers do for FinTechs: 
a long-run shift in the nature of competi- 
tion and successful business models. An 
overarching challenge for banks is how to 
“open up” structurally — both in terms of 
how they leverage partnerships and how 
they permit other entities to access their 
capabilities. Those banks that pursue a 
thoughtful approach to meeting this chal- 
lenge will be best positioned to evolve 
their business models and find new 
sources of value for their customers, 
while performing well financially. 


The age of FinTechs is here. Will this time 
be different than the dot-com boom? Will 
most FinTech attackers fail? Will the few 
attackers who succeed fundamentally re- 
shape banking? Regardless of the odds 
of success for individual FinTech attack- 
ers, banks must seek important signals 
amid the FinTech noise in order to reposi- 
tion their business models and cultures 
for success. There is no time to lose. 
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